Would be great to support separate lock files for each subset. E.g. package-lock-test.json for `test` subset. It is good practice to use `npm ci` for installation to maintain exact versions of deps